In this assignment, students will learn to integrate course topics into an actionable security plan.

Use your organization’s current system security (if this is not available find one on the Internet), and create a system security plan that is appropriate for the environment under consideration.

Note: If you work in a large company, create the system security plan for a single division or department.

Use the “System Security Plan Template,” to complete this assignment. Make sure to include screenshots (as applicable).

Refer to the “System Security Plan,” located within the Topic Materials, when working on this assignment. This resource provides detailed explanations of each section that should be included within the plan.

APA style is not required, but solid technical writing is expected.

This assignment uses a rubric. Please review the rubric prior to beginning the assignment to become familiar with the expectations for successful completion.

You are not required to submit this assignment to LopesWrite.

CYB-525 System Security Plan (SSP) Template

System Security Plan For: {System Name}

Version:

Date:

Prepared By:

System Identification

System Name/Title

Responsible Organization

Information Contact(S)

Assignment of Security Responsibility

System Operational Status

General Description/Purpose

System Environment

System Interconnection/Information Sharing

Laws, Regulations, and Policies Affecting the System

Sensitivity of Information Handled

General Description of Sensitivity

Management Controls

Risk Assessment and Management

Review of Security Controls

Rules of Behavior

Planning for Security in the Life Cycle

Initiation Phase

Development/Acquisition Phase

Implementation Phase

Operation/Maintenance Phase

Disposal Phase

Authorized Processing

Operational Controls

Personnel Security

Physical and Environmental Protection

Production, Input/Output Controls

Contingency Planning

Maintenance Controls

Data Integrity/Validation Controls

Documentation

Security Awareness and Training

Incident Response Capability

Technical Controls

Identification and Authentication

Authorization/Access Controls

Public Access Controls

Audit Trails

© 2018. Grand Canyon University. All Rights Reserved.

© 2017. Grand Canyon University. All Rights Reserved.

Rubic_Print_Format

20.0%

20.0% The student does not complete this section of the plan adequately. Subject knowledge is not evident.

20.0% The student does not complete this section of the plan adequately. Subject knowledge is not evident.

NA

10.0%

Rubic_Print_Format

20.0%

20.0%

20.0%

10.0%